Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
27-01-2024 15:59
General
-
Target
7aaab376fadfa41853401aeb705326cd.exe
-
Size
71KB
-
MD5
7aaab376fadfa41853401aeb705326cd
-
SHA1
4265483f0bcba15b1f7cf88c46d934f42c14fc16
-
SHA256
b649b29a66f2e118aa8e57c6fd39f3f92594b05086158cb35efd0278270f91c5
-
SHA512
73e31c7f5895f9406222410c9ea7ecda60c0c800e770dba430a6fc339820705298852f3012927259a482f683428b995b0da13ec53b3539ccc8d122c9b1550f23
-
SSDEEP
1536:NORSD9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqp9AAPlhbV6:Lg2Ya3I4nafC83ofur6Mc93lh4
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7aaab376fadfa41853401aeb705326cd.exe"C:\Users\Admin\AppData\Local\Temp\7aaab376fadfa41853401aeb705326cd.exe"1⤵
- Checks computer location settings
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
92KB
-
Filesize
72KB